diff options
| author | Ahmed Abdelhalim <[email protected]> | 2025-11-08 15:26:02 +0100 |
|---|---|---|
| committer | Ahmed Abdelhalim <[email protected]> | 2025-11-08 15:26:02 +0100 |
| commit | a0873cfc8ab0f30494c2e47c6f143caf366f05f8 (patch) | |
| tree | 68bc9b8dd7a670bff70d8f72e1190581984cea22 /roles | |
| parent | 20b2d74c404102740b63a0efc723f1ad60073cc9 (diff) | |
Update gpg role to include smart gpg keys dependencies
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/gpg/tasks/main.yml | 16 | ||||
| -rw-r--r-- | roles/gpg/vars/debian.yml | 3 |
2 files changed, 19 insertions, 0 deletions
diff --git a/roles/gpg/tasks/main.yml b/roles/gpg/tasks/main.yml index c16ec636..37db17db 100644 --- a/roles/gpg/tasks/main.yml +++ b/roles/gpg/tasks/main.yml @@ -7,3 +7,19 @@ ansible.builtin.package: name: "{{ gpg_packages }}" state: "present" + +# Disable socket creation by systemd +# This is done to avoid conflicting sockets for forwarding gpg-agent (for smartcards) +# Without it, the gpg-agent will listen to these created sockets on startup and causes +# Warning: remote port forwarding failed for listen path +- name: Mask GPG agent systemd sockets + ansible.builtin.systemd_service: + name: "{{ item }}" + enabled: false + masked: true + scope: user + loop: + - gpg-agent.socket + - gpg-agent-ssh.socket + - gpg-agent-extra.socket + - gpg-agent-browser.socket diff --git a/roles/gpg/vars/debian.yml b/roles/gpg/vars/debian.yml index 2b8cd96f..5a960296 100644 --- a/roles/gpg/vars/debian.yml +++ b/roles/gpg/vars/debian.yml @@ -2,3 +2,6 @@ gpg_packages: - "gnupg2" - "pinentry-tty" + - "pcscd" + - "scdaemon" + - "pcsc-tools" |